{"total":41,"rows":[{"id":"2108.00401","title":"Advances in adversarial attacks and defenses in computer vision: A survey","created":"2021-08-01","cited_by_count":127,"area":null},{"id":"2212.05630","title":"DISCO: Adversarial Defense with Local Implicit Functions","created":"2022-12-11","cited_by_count":34,"area":null},{"id":"2307.07873","title":"Why Does Little Robustness Help? A Further Step Towards Understanding Adversarial Transferability","created":"2023-07-15","cited_by_count":32,"area":null},{"id":"2102.07861","title":"Low Curvature Activations Reduce Overfitting in Adversarial Training","created":"2021-02-15","cited_by_count":29,"area":null},{"id":"2206.05075","title":"Diffeomorphic Counterfactuals with Generative Models","created":"2022-06-10","cited_by_count":29,"area":null},{"id":"2209.07592","title":"Explicit Tradeoffs between Adversarial and Natural Distributional Robustness","created":"2022-09-15","cited_by_count":20,"area":null},{"id":"2112.05005","title":"Mutual Adversarial Training: Learning together is better than going alone","created":"2021-12-09","cited_by_count":17,"area":null},{"id":"2311.15551","title":"Instruct2Attack: Language-Guided Semantic Adversarial Attacks","created":"2023-11-27","cited_by_count":16,"area":null},{"id":"2203.02006","title":"Why adversarial training can hurt robust accuracy","created":"2022-03-03","cited_by_count":14,"area":null},{"id":"2408.17064","title":"Instant Adversarial Purification with Adversarial Consistency Distillation","created":"2024-08-30","cited_by_count":14,"area":null},{"id":"2210.00430","title":"Understanding Adversarial Robustness Against On-manifold Adversarial Examples","created":"2022-10-02","cited_by_count":12,"area":null},{"id":"2206.07953","title":"Analysis and Extensions of Adversarial Training for Video Classification","created":"2022-06-16","cited_by_count":11,"area":null},{"id":"2309.16096","title":"Adversarial Examples Might be Avoidable: The Role of Data Concentration in Adversarial Robustness","created":"2023-09-28","cited_by_count":11,"area":null},{"id":"2112.06323","title":"Interpolated Joint Space Adversarial Training for Robust and Generalizable Defenses","created":"2021-12-12","cited_by_count":10,"area":null},{"id":"2203.01439","title":"Enhancing Adversarial Robustness for Deep Metric Learning","created":"2022-03-02","cited_by_count":10,"area":null},{"id":"2111.05073","title":"MixACM: Mixup-Based Robustness Transfer via Distillation of Activated Channel Maps","created":"2021-11-09","cited_by_count":9,"area":null},{"id":"2310.06182","title":"PAC-Bayesian Spectrally-Normalized Bounds for Adversarially Robust Generalization","created":"2023-10-09","cited_by_count":9,"area":null},{"id":"2110.11950","title":"Adversarial robustness for latent models: Revisiting the robust-standard accuracies tradeoff","created":"2021-10-22","cited_by_count":8,"area":null},{"id":"2210.14404","title":"Adversarial Purification with the Manifold Hypothesis","created":"2022-10-26","cited_by_count":8,"area":null},{"id":"2403.11448","title":"Robust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM","created":"2024-03-18","cited_by_count":6,"area":null},{"id":"2302.14302","title":"Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain","created":"2023-02-28","cited_by_count":5,"area":null},{"id":"2110.06802","title":"Identification of Attack-Specific Signatures in Adversarial Examples","created":"2021-10-13","cited_by_count":4,"area":null},{"id":"2203.13277","title":"A Manifold View of Adversarial Risk","created":"2022-03-24","cited_by_count":4,"area":null},{"id":"2207.07803","title":"Masked Spatial-Spectral Autoencoders Are Excellent Hyperspectral Defenders","created":"2022-07-16","cited_by_count":4,"area":null},{"id":"2410.08620","title":"Natural Language Induced Adversarial Images","created":"2024-10-11","cited_by_count":4,"area":null},{"id":"2305.13548","title":"Attribute-Guided Encryption with Facial Texture Masking","created":"2023-05-22","cited_by_count":3,"area":null},{"id":"2402.08768","title":"Adversarially Robust Feature Learning for Breast Cancer Diagnosis","created":"2024-02-13","cited_by_count":3,"area":null},{"id":"2211.09782","title":"Assessing Neural Network Robustness via Adversarial Pivotal Tuning","created":"2022-11-17","cited_by_count":2,"area":null},{"id":"2211.13305","title":"Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attacks","created":"2022-11-23","cited_by_count":2,"area":null},{"id":"2304.06326","title":"Understanding Overfitting in Adversarial Training via Kernel Regression","created":"2023-04-13","cited_by_count":2,"area":null},{"id":"2406.03017","title":"DifAttack++: Query-Efficient Black-Box Adversarial Attack via Hierarchical Disentangled Feature Space in Cross-Domain","created":"2024-06-05","cited_by_count":2,"area":null},{"id":"2310.09361","title":"Is Certifying $\\ell_p$ Robustness Still Worthwhile?","created":"2023-10-13","cited_by_count":1,"area":null},{"id":"2405.01349","title":"Position: Towards Resilience Against Adversarial Examples","created":"2024-05-02","cited_by_count":1,"area":null},{"id":"2408.14728","title":"Improving Clean Accuracy via a Tangent-Space Perspective on Adversarial Training","created":"2024-08-27","cited_by_count":1,"area":null},{"id":"2501.14641","title":"Towards Scalable Topological Regularizers","created":"2025-01-24","cited_by_count":1,"area":null},{"id":"2507.03427","title":"Rectifying Adversarial Sample with Low Entropy Prior for Test-Time Defense","created":"2025-07-04","cited_by_count":1,"area":null},{"id":"2203.07027","title":"Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification","created":"2022-03-11","cited_by_count":0,"area":null},{"id":"2210.07100","title":"Dissipative residual layers for unsupervised implicit parameterization of data manifolds","created":"2022-10-13","cited_by_count":0,"area":null},{"id":"2410.06921","title":"Adversarial Vulnerability as a Consequence of On-Manifold Inseparibility","created":"2024-10-09","cited_by_count":0,"area":null},{"id":"2608.29510","title":"ARMOR: Manifold-Oriented Training for Adversarially Robust Aerial Object Detection under Data Scarcity","created":"2026-08-30","cited_by_count":0,"area":null},{"id":"2609.38991","title":"Anchoring Adversarial Trajectories to Data Manifolds: A Bilevel Transfer Optimization Framework","created":"2026-09-30","cited_by_count":0,"area":null}],"next_cursor":null}